CVE-2005-2467: mysql eventum
Vulnerability summary
CVE-2005-2467 is a medium (CVSS 5.8) vulnerability in mysql eventum. EPSS estimates a 2.87% chance of exploitation in the next 30 days, higher than 86.5% of scored vulnerabilities. 9 public exploits are recorded.
Timeline
- 06-06-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.87%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.87% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
9 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (osvdb.org)
Maturity: unknown
Exploit Reference (securitytracker.com)
Maturity: unknown
Show all 9 exploits
Exploit Reference (gulftech.org)
Maturity: unknown
Exploit Reference (osvdb.org)
Maturity: unknown
Exploit Reference (osvdb.org)
Maturity: unknown
MySQL AB Eventum 1.x - 'get_jsrs_data.php?F' Cross-Site Scripting
Maturity: poc
MySQL AB Eventum 1.x - 'list.php?release' Cross-Site Scripting
Maturity: poc
MySQL AB Eventum 1.x - 'view.php?id' Cross-Site Scripting
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mysql1 product
- eventum1.1 | 1.2 | 1.2.2 | 1.3 | 1.3.1 | 1.4 | 1.5.4 | 1.5.5
1 vendor · 1 product